Archive for February 25th, 2010

Hackers Expose Security Flaws with “Elvis Presley” Passport

Henry Chang | February 25, 2010 in Miscellaneous,United States Immigration | Comments (0)

CNN recently reported that hackers had demonstrated how a biometric passport issued in the name of “Elvis Presley” could be cleared through an automated passport scanning system being tested at an international airport. Using a doctored passport at a self-serve passport machine, the hacker was cleared for travel after just a few seconds and a picture of Elvis Presley himself appeared on the monitor’s display.

Adam Laurie and Jeroen Van Beek, who call themselves “ethical hackers,” say the exercise exposed how easy it is to fool a passport scanner with a fraudulent biometric chip. The Presley test was carried out at Amsterdam’s Schiphol airport in September 2008, by Laurie and Van Beek, to highlight potential security shortcomings.

Biometric passports, with data stored on embedded chip, are now standard issue in Europe, the U.S. and a number of other countries. However, Laurie and Van Beek used their knowledge of IT security and hacking to show that biometric passports remain vulnerable to fraud.

The problem, in part, is that each country has its own security signature for verifying its own biometric passports. While some share that information, many countries do not, making it easy to exploit the loopholes.

The CNN article may be accessed here.


Cellular Telephones Top List of Electronic Items Seized by USCBP

Henry Chang | in United States Immigration | Comments (0)

The Los Angeles Times has reported that, in the last year and a half, civil liberties groups and business travel leaders have complained about United States Customs & Border Protection (“USCBP”) officers’ broad authority to search and seize laptops and other electronic gadgets carried by international travelers. Recent data obtained by the American Civil Liberties Union (“ACLU”) details the extent to which this has happened.

Debate over the searches picked up steam in July 2008 when USCBP issued a policy directive, clarifying that its officers at airports and ports of entry could look into electronic devices without first establishing suspicion of wrongdoing. In a recent nine-month period, USCBP searched or seized 1,644 devices from travelers entering and leaving the country, according to data the ACLU obtained through a lawsuit.

Of the searched or seized devices, 582 were cellphones, 398 were laptop computers and 259 were digital cameras. The rest included MP3 players, flash drives, hard drives and DVDs. The ACLU’s data doesn’t indicate how many travelers crossed the borders during that same period, but USCBP estimates that 22 million travelers enter the U.S. per month.

The new data was included in the nearly 900 pages of documents obtained by the ACLU through a Freedom of Information Act lawsuit filed in June. The civil liberties group disclosed the information in January and expects to collect more this month.

The ACLU insists that border agents should be required to establish a suspicion that a traveler is breaking the law before they can search electronic devices. The Association of Corporate Travel Executives, a nonprofit group that represents 2,500 members worldwide, also objects to the searches.

The original LA Times article appears here.